FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

NettyMemshell 注入成功时漏洞缺报 · Issue #36 · SummerSec/SpringBootExploit · GitHub

This repository was archived by the owner on Jul 25, 2024. It is now read-only.
/ SpringBootExploit Public archive
This repository was archived by the owner on Jul 25, 2024. It is now read-only.

NettyMemshell 注入成功时漏洞缺报 #36

Open
Open
NettyMemshell 注入成功时漏洞缺报#36

Description

c0r1
opened on Oct 15, 2022

漏洞利用状态检查使用的方法错误，这里的 header 实际添加到了 Request Body 中，导致 NettyMemshell 注入成功时检测利用状态失败，导致漏洞缺报

https://github.com/0x727/SpringBootExploit/blob/d38a773fb5ab947c4d6a359290ecada0a9f24421/src/main/java/com/drops/exp/SpringCloudGatewayRCEEXP.java#L44

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

    Back | FazBrowse Home | New Git URL